The Better Business Bureau Warns of Process-Server Phishbait

Stu Sjouwerman | Jul 3, 2023

Process Server PhishingThe Better Business Bureau (BBB) has warned of a scam in which attackers pose as process servers in order to steal information and commit identity theft.

“You receive a call from an unknown or blocked number from a person claiming to be a process server,” the Bureau says. “They might say there is a lien on your home or someone is taking you to court over unpaid medical bills. In other cases, the scammer may be secretive, saying they can’t reveal details until your papers are served.

Next, they’ll ask you to ‘confirm’ sensitive personal information, such as your date of birth and Social Security number. When you’re hesitant to give out this information, they stress the urgency of the matter – after all, you’re being taken to court! If you ask too many questions about who is making a complaint or what company the process server works for, the scammer will get angry.”

The BBB provides the following advice to help users thwart these scams:

  • “Be wary of scare tactics. Scammers love to threaten people with legal action or hefty fines, scaring them into giving up their personal information. They hope fear will make you act without thinking. Always remember representatives of a reputable business or legal office will be polite and civil, even in a serious situation. They won’t pressure you to act immediately “or else.”
  • “Search your local court website. If you think there’s a chance someone has filed a lawsuit against you, check your local court's website. Search your name to see if any lawsuit has been filed. If nothing comes up, you’re in the clear.
  • “The scammer may have some personal information. Don’t give them more. Scammers may have some of your personal information already from a previous phishing scam, a data breach, or some other source. They may use these stolen details to get even more information from you. For example, they might read your Social Security number and then ask you to “confirm” your date of birth. Even if someone already has a few details, don’t give them any further information unless you are sure you’re dealing with someone you trust.”

New-school security awareness training can give your employees a healthy sense of suspicion so they can avoid falling for social engineering attacks.

The BBB has the story.

Topics: Phishing

Discover Your Organization’s Phish-prone™ Percentage

Ninety-one percent of data breaches begin with spear phishing. Launch our Free Phishing Security Test for up to 100 users to uncover your team's vulnerability and see how your security posture stacks up against industry benchmarks.

Get Your Free Phishing Security Test

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.